one AD dataconnector - many base DNs

[Peter Schober]

* Vignesh, Vanna G. <vignesh at musc.edu> [2015-10-01 15:23]:
> In attribute resolver, I have one active directory
> dataconnector. How can I use multiple baseDNs to the same data
> connector? I have multiple baseDN in login.config but I am not sure
> how to do that in attribute-resilver.xml

Besides what Douglas said: Unless Shibboleth is your only LDAP client
you'll run into the same problem with every other LDAP client, and
most (all?) I've seen can only make use of a single DN to start the
search from.
So if searching a common ancestor DN (e.g. the DSA's basedn) isn't an
option you'll likely need some kind of meta-directory, that will
present clients with a sane view of your internal directory structure.
-peter